Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c8c8af7a-e466-4252-9102-883597fbe3ee/0/3130332e3131322e3233352e302f32342d3234203d3e20313530343736.roa
File:                     3130332e3131322e3233352e302f32342d3234203d3e20313530343736.roa (raw, json)
Hash identifier:          OgIjR/o5/TcQBsPk2miV/ykhVvpm1OENtZBEc5woj90=
Subject key identifier:   85:F6:0F:E5:78:10:79:F9:16:4F:B0:9B:95:EE:CB:B0:F0:80:CE:3B
Certificate issuer:       /CN=7C4CED4E60170CCE711624802DD8A811A1562077
Certificate serial:       0734EDA0E23BA39B9E3E722C1BD45C13D3DC6BE2
Authority key identifier: 7C:4C:ED:4E:60:17:0C:CE:71:16:24:80:2D:D8:A8:11:A1:56:20:77
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C4CED4E60170CCE711624802DD8A811A1562077.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c8c8af7a-e466-4252-9102-883597fbe3ee/0/3130332e3131322e3233352e302f32342d3234203d3e20313530343736.roa
Signing time:             Mon 12 Feb 2024 09:00:00 +0000
ROA not before:           Mon 12 Feb 2024 08:55:00 +0000
ROA not after:            Mon 10 Feb 2025 09:00:00 +0000
asID:                     150476
IP address blocks:        103.112.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c8c8af7a-e466-4252-9102-883597fbe3ee/0/7C4CED4E60170CCE711624802DD8A811A1562077.crl
                          rsync://repo-rpki.idnic.net/repo/c8c8af7a-e466-4252-9102-883597fbe3ee/0/7C4CED4E60170CCE711624802DD8A811A1562077.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C4CED4E60170CCE711624802DD8A811A1562077.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 20:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:34:ed:a0:e2:3b:a3:9b:9e:3e:72:2c:1b:d4:5c:13:d3:dc:6b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C4CED4E60170CCE711624802DD8A811A1562077
        Validity
            Not Before: Feb 12 08:55:00 2024 GMT
            Not After : Feb 10 09:00:00 2025 GMT
        Subject: CN=85F60FE5781079F9164FB09B95EECBB0F080CE3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:9e:2a:5b:24:a5:53:4f:13:3a:22:43:35:1c:
                    20:23:e7:d4:4a:4c:92:28:78:a6:a4:b0:1b:12:cf:
                    1b:e3:ba:4b:e9:5d:19:7c:2a:c8:b6:23:a9:0f:3b:
                    2b:62:11:26:bf:13:9f:30:a1:64:8e:70:51:96:ad:
                    58:78:24:b8:8b:c2:28:78:c2:c0:e7:9f:0f:a9:a7:
                    e8:d2:98:c4:15:c5:68:05:26:62:7c:f8:f8:61:8d:
                    be:f4:ba:d6:78:5b:9d:6e:58:67:fe:62:e8:88:e7:
                    6e:f1:85:d9:20:7a:25:eb:3e:df:25:f3:8e:52:d6:
                    63:0b:c8:b3:de:cd:bc:08:f9:d1:e0:1d:97:48:e1:
                    48:bc:cc:24:55:9b:3d:ea:f5:f6:b4:d6:9e:d8:b4:
                    ba:2f:aa:b0:5c:f2:20:10:67:20:9e:b0:b1:59:24:
                    d8:5f:c6:8b:82:fa:80:2c:f5:e6:02:57:29:dc:1f:
                    08:75:fe:0b:29:e5:e3:54:cd:94:c6:8f:3f:1f:85:
                    5d:e6:fa:ae:40:36:44:06:18:cb:3d:b6:9b:e6:7b:
                    e4:c3:38:a4:45:79:88:27:8b:1d:44:ba:1e:c9:ff:
                    d6:35:2e:58:9b:3a:6c:97:8a:f8:f2:66:21:bd:30:
                    d7:31:30:84:95:f2:fc:a0:e1:79:c0:f7:af:a9:b8:
                    48:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F6:0F:E5:78:10:79:F9:16:4F:B0:9B:95:EE:CB:B0:F0:80:CE:3B
            X509v3 Authority Key Identifier:
                keyid:7C:4C:ED:4E:60:17:0C:CE:71:16:24:80:2D:D8:A8:11:A1:56:20:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c8c8af7a-e466-4252-9102-883597fbe3ee/0/7C4CED4E60170CCE711624802DD8A811A1562077.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C4CED4E60170CCE711624802DD8A811A1562077.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8c8af7a-e466-4252-9102-883597fbe3ee/0/3130332e3131322e3233352e302f32342d3234203d3e20313530343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:82:00:c2:d5:01:8b:64:df:44:85:44:6c:e8:26:96:6b:cd:
         73:2a:75:0b:0b:5c:15:f6:c8:93:70:70:a4:95:6a:36:cf:ee:
         33:9d:bc:f7:ae:16:a9:47:79:6d:b1:9c:b7:0a:d3:68:67:0f:
         6a:ab:bd:0e:4c:7f:4f:49:75:20:b9:75:30:f6:3e:c6:13:1d:
         48:bf:fc:49:7b:d5:99:df:37:23:28:9a:b5:93:68:56:ad:aa:
         9b:c4:be:ec:fb:4f:08:a9:13:cd:4a:cf:4c:d1:00:4d:99:63:
         15:b5:5a:3b:54:64:1d:05:b7:4b:76:af:76:29:d1:ee:f4:10:
         d5:be:69:10:d2:cb:ce:fa:45:48:c9:30:07:53:1e:0b:f0:24:
         d1:b2:18:da:c3:cc:52:9c:85:3e:fc:7e:24:f7:39:d9:d3:0d:
         e5:06:97:ed:6f:71:d2:b3:f9:3d:a7:20:56:a7:69:69:3d:33:
         05:3c:54:a9:22:97:5a:f1:5b:c1:c8:b3:f0:4a:1c:a3:ad:29:
         d1:c4:4c:d1:84:38:03:b1:84:38:d5:7a:9a:e5:f9:df:ea:38:
         c0:ce:da:b8:7b:b4:35:24:24:54:ed:3c:f2:99:00:4d:68:ec:
         02:5c:73:f1:4b:87:d5:eb:25:33:5a:2d:c4:69:bd:8a:83:25:
         02:9e:22:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 19:47:12 2024 by rpki-client on console-fra.rpki-client.org